Amendments to the Claims: 

Re -write the claims as set forth below. This listing of claims will replace all prior versions and 
listings, of claims in the application: 

Listing of Claims: 

1 . (Original) A method for providing information security comprising the steps of: 
determining a digital signature verification error based on a received message header 

identifier associated with a public key certificate identifier; and 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier. 

2. (Original) The method of claim 1 wherein the step of generating the digital signature 
verification map includes storing at least one acceptable message header identifier as a digital 
signature verification map entry in response to determining the digital signature verification 
error. 

3. (Original) The method of claim 1 wherein the step of generating the digital signature 
verification map includes mapping the plurality of acceptable message header identifiers on a per 
certificate subject identification data basis. 

4. (Original) The method of claim 1 including the step of verifying a digital signature 
associated with received message information based on the digital signature verification map. 
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5. (Original) The method of claim 1 including the step of receiving digital signature 
verification map update data and updating the digital signature verification map with at least one 
acceptable message header identifier based on a received message header ID. 

6. (Original) The method of claim 1 wherein the message header identifier includes at least 
one of data representing an email address of a sender, a telephone number of a sender and an 
identifier associated with a sending unit. 

7. (Original) The method of claim 1 including the step of digitally signing the digital 
signature verification map to provide a trusted digital signature verification map. 

8. (Canceled) 

9. (Original) The method of claim 1 wherein the step of determining a digital signature 
verification error includes the steps of 

comparing the public key certificate identifier with the message header identifier to 

determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
verifying a digital signature based on a verification key associated with the public key 

certificate identifier. 

10. (Original) A method for providing information security comprising the steps of: 
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determining a digital signature verification error based on a received message header 
identifier associated with a public key certificate identifier; 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier by storing at least 
one acceptable message header identifier as a digital signature verification map entry in response 
to determining the digital signature verification error; and 

verifying a digital signature associated with received message information based on the 
digital signature verification map. 

1 1 . (Original) The method of claim 10 wherein the step of determining a digital signature 
verification error includes the steps of 

comparing the public key certificate identifier with the message header identifier to 

determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
verifying a digital signature based on a verification key associated with the public key 

certificate identifier. 

12. (Original) The method of claim 10 wherein the step of generating the digital signature 
verification map includes mapping the plurality of acceptable message header identifiers on a per 
certificate subject identification data basis. 
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13. (Original) The method of claim 1 1 including the step of receiving digital signature 
verification map update data and updating the digital signature verification map with at least one 
acceptable message header identifier based on a received message header ID. 

14. (Original) The method of claim 10 wherein at least one of the plurality of message 
header identifiers includes at least one of data representing an email address of a sender, a 
telephone number of a sender and an identifier associated with a sending unit. 

15. (Original) The method of claim 13 including the step of digitally signing the digital 
signature verification map to provide a trusted digital signature verification map. 

16. (Canceled) 

17. (Original) A method for providing information security comprising the steps of: 
determining a digital signature verification error based on a received message header 

identifier associated with a public key certificate identifier; and 

updating a digital signature verification map to add an acceptable message header 
identifier associated with the public key certificate identifier. 

18. (Original) The method of claim 17 including the step of verifying a digital signature 
associated with received message information based on the digital signature verification map. 
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19. (Original) The method of claim 17 wherein the step of determining a digital signature 
verification error includes the steps of 

comparing the public key certificate identifier with the message header identifier to 

determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
verifying a digital signature based on a verification key associated with the public key 

certificate identifier. 

20. (Original) An apparatus for providing information security comprising: 

a processing module operative to determine a digital signature verification error based on 
a received message header identifier associated with a public key certificate identifier; and 
operative to generate a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier; and 
memory, operatively coupled to the processing module, containing the digital signature 
verification map. 

21 . (Original) The apparatus of claim 20 wherein the memory stores at least one acceptable 
message header identifier as a digital signature verification map entry. 

22. (Original) The apparatus of claim 20 wherein the processing module maps the plurality 
of acceptable message header identifiers on a per certificate subject identification data basis. 
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23. (Original) The apparatus of claim 20 wherein the processing module includes a 
cryptographic engine operative to verify a digital signature associated with received message 
information based on the digital signature verification map. 

24. (Original) The apparatus of claim 20 wherein the processing module updates the digital 
signature verification map with at least one acceptable message header identifier based on a 
received message header ID. 

25. (Original) The apparatus of claim 20 wherein the message header identifier includes at 
least one of data representing an email address of a sender, a telephone number of a sender and 
an identifier associated with a sending unit. 

26. (Original) The apparatus of claim 20 wherein the processing module digitally signs the 
digital signature verification map to provide a trusted digital signature verification map. 

27. (Canceled) 

28. (Original) The apparatus of claim 20 wherein the processing module determines a digital 
signature verification error by comparing the public key certificate identifier with the message 
header identifier to determine if a mismatch is detected; if a mismatch is detected, generating a 
mismatch notification for an operator; and 

verifying a digital signature based on a verification key associated with the public key certificate 
identifier. 
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29. (Original) A storage medium comprising: 

memory containing executable instructions that when read by one or more processing 
units causes one or more processing units to: 

determine a digital signature verification error based on a received message 
header identifier associated with a pubhc key certificate identifier; and 

generate a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier. 

30. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to generate the digital signature 
verification map by storing at least one acceptable message header identifier as a digital 
signature verification map entry in response to determining the digital signature verification 
error. 

3 1 . (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to map the plurality of acceptable 
message header identifiers on a per certificate subject identification data basis. 

32. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to verify a digital signature associated 
with received message information based on the digital signature verification map. 
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33. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to receive digital signature verification 
map update data and update the digital signature verification map with at least one acceptable 
message header identifier based on a received message header ID. 

34. (Original) The storage medium of claim 29 wherein the message header identifier 
includes at least one of data representing an email address of a sender, a telephone number of a 
sender and an identifier associated with a sending unit. 

35. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to digitally sign the digital signature 
verification map to provide a trusted digital signature verification map. 

36. (Canceled) 

37. (Previously presented) The storage medium of claim 29 wherein the memory contains 
executable instructions that cause the one or more processing units to determine a digital 
signature verification error by: 

verifying a digital signature based on a verification key associated with the public key 
certificate identifier; 

if verification is successful, comparing the public key certificate identifier with the 
message header identifier to determine if a mismatch is detected; and 

if a mismatch is detected, generating a mismatch notification for an operator. 
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38. (Previously presented) A method for providing information security comprising the steps 
of: 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject ahas; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with a public key certificate identifier. 

39. (Canceled) 

40. (Previously presented) A method for providing information security comprising the steps 
of: 

determining a digital signature verification error based on a received message header 
identifier associated with a public key certificate identifier; 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier; 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject ahas; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with the public key certificate identifier. 

41 . (Previously presented) A method for providing information security comprising the steps 
of: 
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determining a digital signature verification error based on a received message header 
identifier associated with a public key certificate identifier; 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier by storing at least 
one acceptable message header identifier as a digital signature verification map entry in response 
to determining the digital signature verification error; 

verifying a digital signature associated with received message information based on the digital 
signature verification map; 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject ahas; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with the public key certificate identifier. 

42. (Previously presented) An apparatus for providing information security comprising: 

a processing module operative to determine a digital signature verification error based on 
a received message header identifier associated with a public key certificate identifier; and 
operative to generate a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the pubhc key certificate identifier; 
memory, operatively coupled to the processing module, containing the digital signature 
verification map; and 

wherein the processing module generates a trusted alias map containing the plurality of 
acceptable message identifiers and at least one associated subject alias, and displays the at least 
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one subject alias in response verifying a digital signature associated with the public key 
certificate identifier. 

43. (Previously presented) A storage medium comprising: 

memory containing executable instructions that when read by one or more processing 
units causes one or more processing units to: 

determine a digital signature verification error based on a received message header 
identifier associated with a public key certificate identifier; and 

generate a digital signature verification map containing a plurality of acceptable message 
header identifiers associated with the public key certificate identifier; and 

wherein the memory contains executable instructions that cause the one or more 
processing units to digitally sign the digital signature verification map to provide a trusted digital 
signature verification map. 

44. (Previously presented) A method for providing information security comprising the steps 
of: 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject alias; 

displaying the at least one subject alias in response to verifying a digital signature 
associated with a public key certificate identifier; and 

wherein the step of generating the trusted alias map includes digitally signing the trusted 
alias map, and wherein the method includes the step of verifying trusted alias map digital 
signature prior to displaying the at least one subject alias. 
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45. (Currently Amended) The method of claim 38 wherein the trusted alias map identifies 
multiple public key certificates to be associated with at least one friendly email name. 

46. (Previously presented) The method of claim 1 comprising continually updating the 
digital signature verification map to accommodate aliases to a common subject associated with 
the certificate. 



CHICAGO/#1574945.1 



13 



